RevealTheme logo

Password Hash Generator (PBKDF2)

Generate secure password hashes in your browser using PBKDF2-SHA256. Stronger than MD5 or plain SHA, with adjustable work factor.

What is Password Hash Generator (PBKDF2)?

Bcrypt is a popular password hashing algorithm, but it requires a server-side library. This tool produces equivalent-strength hashes using PBKDF2 (Password-Based Key Derivation Function 2) — a NIST-recommended algorithm with adjustable iteration count. Both bcrypt and PBKDF2 deliberately slow down brute-force attacks; the right iteration count makes each guess take ~250ms.

Frequently asked questions

Is this real bcrypt?
No — this is PBKDF2-SHA256, which is similar in security guarantees. For literal bcrypt format, use a server-side tool (Node's bcrypt npm package, or PHP password_hash()).
How many iterations should I use?
100,000+ for SHA-256 is current OWASP guidance. Higher = slower for both you and attackers.

Related tools